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Abstract 


Uncertainty  and  risk  are  inherent  in  the  nature  of  military  aetion.  The  suceess  of  any 
joint  military  operation  is  based  upon  a  willingness  to  balance  risk  with  opportunity  in  taking 
bold,  deeisive  action  necessary  to  triumph  in  war.  At  the  same  time,  commanders  have  a 
fundamental  responsibility  to  safeguard  personnel  and  material  resources,  and  to  accept  the  level 
of  controlled  risk  necessary  to  aceomplish  the  assigned  mission. 

Operational  Risk  Management  (ORM)  is  the  process  that  assists  the  military  commander 
in  reducing  or  offsetting  risk  and  helps  him  think  through  his  options  when  faced  with  foree 
employment  and  the  requirement  for  risk  eontrol  for  mission  suceess.  By  systematieally 
identifying,  assessing,  and  eontrolling  risk  arising  from  operational  faetors,  the  eommander  can 
evaluate  all  the  elements  that  affect  the  employment  of  forces  and  assets.  While  ORM 
terminology  is  discussed  in  joint  operational  doetrine  and  planning  publications,  there  exists  no 
clear  application  and  integration  in  developing  the  Commander’s  Estimate  of  the  Situation  (CES) 
through  the  Course  of  Action  (COA)  process.  This  paper  will  illustrate  how  ORM  fits  into  the 
existing  Joint  Operation  Planning  and  Execution  System  (JOPES)  proeess  to  assist  leadership  in 
identifying  the  optimum  COA  for  mission  suceess.  Included  in  the  ORM  applieation  is  a 
quantifiable  evaluation  process  that  prioritizes  the  threat,  vulnerability,  and  critieality  for  joint 
eommanders  to  apply  limited  resourees  to  enhance  operational  capability.  No  longer  will  the 
Commander  Joint  Task  Eorce  (CJTE)  have  to  rely  exclusively  on  his  intuition  and  experience  in 
calculating  the  inereased  levels  of  risk  he  ean  accept  for  mission  suecess.  This  paper  will 
recommend  ehanges  to  Joint  Publication  3-0  Doctrine  for  Joint  Operations  to  assist  the 
commander  in  evaluating  and  ultimately  accepting  greater  levels  of  controlled  risk  in  order  to 
triumph  in  eombat. 


1 


List  of  Figures  and  Tables 


Recommendation  Attachment  1: . 16 

Figure  1 :  Continuous  Application  of  Risk  Management . 23 

Table  I:  Risk  Management  Steps . 24 

Table  II:  Risk  Management  Exeeution  -  Risk  Management  in  Deliberate  Planning . 25 

Table  III:  Risk  Management  Exeeution  -  Risk  Management  in  Crisis  Aetion  Planning . 25 

Table  IV:  "Enhaneed"  Risk  Assessment  Matrix . 26 

Table  V:  Risk  Assessment  Matrix . 26 

Table  VI:  Deliberate  and  Crisis  Aetion  Planning  Proeess  in  Relation  to  ORM . 27 


ii 


Introduction  to  Operational  Risk  Management  in  the  Joint  Task  Force  (JTF)  Environment 

Uncertainty  and  risk  are  inherent  in  the  nature  of  military  aetion.  The  sueeess  of  the  Joint 
Task  Foree  (JTF)  is  based  upon  a  willingness  to  balanee  risk  with  opportunity  in  taking  the  bold 
and  deeisive  aetion  neeessary  to  triumph  in  battle.  At  the  same  time,  eommanders  have  a 
fundamental  responsibility  to  safeguard  highly  valued  personnel  and  material  resources  and  to 
aeeept  only  the  minimal  level  of  risk  neeessary  to  aeeomplish  the  assigned  mission.^ 

Sinee  the  Korean  eonfliet,  United  States  forees  have  suffered  more  losses  from  non- 
eombat  eauses  than  from  enemy  aetion.  Key  faetors  eontributing  to  these  losses  inelude: 

(1)  Rapidly  ehanging  operational  environment 

(2)  Fast-paeed,  high  operations  tempo,  and  high  personnel  tempo. 

(3)  Equipment  failure,  support  failure,  and  effeets  of  the  physieal  environment. 

(4)  Human  factors. 

Operational  Risk  Management  (ORM)  is  the  proeess  used  by  senior  leadership  and 
deeision-makers  to  offset  or  reduee  risk.  Military  operations,  espeeially  eombat  operations,  are 
demanding,  complex  and  extremely  dangerous.  Managing  risk  associated  with  sueh  operations 
requires  edueated  judgment  and  professional  eompetenee.  The  ORM  proeess  allows  the 
Commander  Joint  Task  Foree  (CJTF)  to  make  informed  eonseious  deeisions  to  keep  risks  at 
aeeep table  levels.  The  proeess  of  ORM  is  not  designed  to  eliminate  risk,  whieh  is  all  but 
impossible  in  eombat,  but  rather  to  eontrol  it  and  eapitalize  on  the  opportunities  presented. 
President  Bush  states,  “I  am  eommitted  to  fostering  a  military  eulture  where  visionary  leaders 
who  pursue  intelligent  risk-taking  and  forward  thinking  are  reeognized  and  promoted.”^  Risk 
management  should  be  applied  to  all  levels  of  war  and  aeross  the  full  range  of  military 
operations.  Coneurrently,  ORM  should  be  applied  to  all  phases  of  an  operation  and  should 
include  any  branches  and  sequels  to  that  operation."^ 


1 


This  paper  will  illustrate  that  the  CJTF  does  not  have  to  depend  exelusively  on  his 
intuition  and  experience  in  calculating  the  increased  levels  of  risk  he  can  accept  for  mission 
success.  He  will  now  be  able  to  capitalize  on  the  benefits  of  a  risk-based,  decision-making 
process  called  ORM.  It  will  also  argue  that  ORM  must  be  incorporated  into  the  Joint  Operation 
Planning  and  Execution  System  (JOPES)  and  the  Commander’s  Estimate  of  the  Situation  (CES) 
to  optimize  prioritization  of  limited  resources  for  enhanced  operational  capability.  Additionally 
it  will  recommend  changes  to  JP  3-0,  Doctrine  for  Joint  Operations  and  will  assist  the  CJTE  and 
his  staff  in  formulating  Courses  of  Action  (COA)  within  the  existing  planning  process. 

The  ORM  process  is  not  a  radically  new  way  of  conducting  business  in  the  joint  planning 
environment.  The  U.S.  military  has  been  applying  ORM  processes  and  philosophies  informally 
for  years.  However,  the  initial  use  of  ORM  was  almost  exclusively  compartmentalized  into 
safety  programs  designed  to  prevent  human  factors  mishaps.  The  application  of  ORM  to  war 
fighting  capabilities  and  operational  art  is  part  of  a  cultural  change  that  must  precede  its 
integration  into  the  joint  doctrinal  mindset.  No  longer  is  it  equated  to  only  one  aspect  of  force 
protection — safety.  Although  safety  responsibilities  interface  with  other  elements  of  protection 
they  are  often  viewed  as  external  to  the  mission.^  This  misguided  association  of  ORM  with 
safety  programs  gave  it  a  low  priority  as  a  war-fighting  tool  for  the  CJTE.  A  by-product  of  the 
fragmented  use  of  ORM  at  the  operational  level  of  warfare^  has  been  the  lack  of  flexibility 
among  some  in  senior  staff  positions  who  are  protective  of  “the  way  things  are  done  around 
here”  and  resist  change.  Change,  as  a  function  of  the  process  of  reorganization  now  being 
implemented  in  the  Department  of  Defense  (DOD),  is  inevitable  and  the  mindset  of  “a  change 
imposed  is  a  change  opposed”  must  be  mitigated.  Change  during  planning  and  on  the  battlefield 
is  part  of  the  unpredictability  and  friction  of  war.  How  the  combatant  commander  and  his 
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subordinate  commanders  incorporate  and  react  to  change  can  be  the  difference  between  success 
and  failure.  Certain  realities  of  change  must  be  incorporated  into  the  mindset  of  commanders  to 
deal  with  it  effectively,  so  as  to  capitalize  on  timely  counter-measures  necessary  to  maintain 
battlespace  dominance. 

•  Change  happens  in  all  military  operations. 

•  Anticipate  change  to  occur  normally  at  the  most  inappropriate  time.  During 
“Operation  Iraqi  Freedom”  in  April  2003,  a  significant  inflow  of  coalition  forces  to 
the  battlespace  planned  was  to  ingress  through  Turkey.  Due  to  internal  political 
dissonance,  permission  was  denied  to  U.S.  forces  at  the  last  minute,  and  significantly 
more  difficult  and  expensive  branch  plans  were  executed. 

•  Monitor  change.  Be  prepared  to  modify  or  abandon  COAs  as  leadership  detects 
early  signs  of  operational  deterioration. 

•  Adapt  to  change  quickly.  The  sooner  the  Joint  Force  Commander  (JFC)  abandons  a 
deficient  Course  of  Action  to  counter  the  threat,  the  sooner  he  will  be  able  to 
maximize  his  operational  opportunity. 

•  Change.  Implement  change  force-wide  as  quickly  as  possible  once  the  commander 
has  selected  his  new  CO  A.’ 

As  it  became  apparent  to  field  commanders,  the  use  of  ORM  produced  statistically 
significant  results  in  the  lowering  of  combat  and  non-combat  mishaps,  it  was  time  to  incorporate 
ORM  at  the  operational/strategic  levels  of  war.  As  was  the  original  intent,  it  became  obvious  to 
senior  leadership  that: 

Risk  management  is  not  an  add-on  feature  to  the  decision  making  process  but 
rather  a  fully  integrated  element  of  planning  and  executing  operations. . . .  Risk 
management  helps  us  preserve  combat  power  and  retain  the  flexibility  for  bold 
decisive  action.  Proper  risk  management  is  a  combat  multiplier  that  we  can  ill 
afford  to  squander.*^ 
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Historically,  the  Army  has  had  more  aeeidental  losses  ineluding  fratrieide  than 
losses  from  enemy  aetion.  In  Desert  Shield  and  Desert  Storm,  75  pereent  of  the 
easualties  were  due  to  aeeidents  with  5  pereent  due  to  friendly  fire  and  only  20  pereent 
due  to  eombat  enemy  action.^  The  Vietnam  Memorial  in  Washington,  D.C.  has  58,000 
names  inseribed  of  those  men  and  women  who  died  in  the  eombat  zone  during  the 
conflict.  Over  10,000  of  those  serviee  members  did  not  die  from  enemy  action,  but  rather 
from  mishaps  and  fratrieide. 

ORM  Process  Integration  For  Joint  Force  Commanders 

Commanders  must  realize  that  risk  is  related  to  gain-the  greater  the  risk,  the  greater  the 
potential  gain.  Our  military  heritage  is  built  upon  the  eornerstone  of  seizing  the  initiative  and 
taking  decisive  aetion.  The  JFC  must  never  eonfuse  eontrolled  risk-taking  with  “a  gamble.” 
Field  Marshal  Erwin  Rommel  defined  risk  as,  “a  ehanee  you  take;  if  it  fails,  you  ean  reeover.  A 
gamble  is  a  ehanee  taken;  if  it  fails,  recovery  is  impossible.”'*^ 

The  risk  management  proeess  involves  logieal,  sequential  identifieation  of  threats  to  both 
individual  forees  and  mission  aceomplishment.  The  applieation  of  ORM  is  eontinuous 
throughout  the  joint  planning  proeess,  providing  risk  aeoeptanee  guidelines  for  the  exereise  of 
authority  of  the  eombatant  eommander  and  his  joint  foree  eommanders.  Figure  1  (Continuous 
Applieation  of  Risk  Management)  shows  the  flow  of  the  ORM  proeess  to  be  used  during  Joint 
Operation  Planning. ' ' 

At  the  operational  level  of  planning  and  execution  of  major  evolutions,  a  key  eomponent 
of  sueeess  is  eommunieating  unaeeeptable  levels  of  risk  up  through  the  ehain  of  eommand.  This 
risk-based  situational  awareness  posture  should  lead  eommanders  to  eonsider  ineorporating 
operational  pauses  for  maintaining  taetieal  advantages  and  not  overextending  operational  reaeh. 
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By  the  understanding  that  an  aeeumulation  of  low  to  medium  risk  ean  add  up  to  substantial 
shortfalls  in  eontrol  of  the  environment,  eommanders  can  preempt  a  hazardous  situation  by 
applying  risk  controls  to  maintain  full  application  of  the  principles  of  war  and  continue  to 
dominate  the  battlespace. 

The  Process 

The  ORM  process  assists  decision-makers  in  reducing  or  offsetting  risk.  It  identifies  the 
goal,  key  aspects,  and  principal  concepts  of  controlling  hazards  to  conserve  combat  power  and 
resources.  The  steps  of  ORM  are: 

•  Identification  of  threats  to  both  individual  forces  and  mission  success.  Threats 

are  sources  of  danger.  Any  opposing  force  condition,  source,  or  circumstance  with 

the  potential  to  impact  mission  accomplishment  or  capability  must  be  considered  a 

threat.  Experience,  common  sense  and  ORM  tools  help  identify  real  or  potential 

threats.  Threat  recognition  is  the  foundation  for  the  entire  ORM  process.  If  a  threat 

1 2 

cannot  be  identified,  it  cannot  be  controlled. 

•  Assessing  the  threats  based  upon  the  combined  quantification  of  severity  and 
probability  of  loss  or  failure.  A  matrix  has  been  designed  to  assess  the  threats  to 
mission  success  and  force  protection.  Using  risk-based  metrics  to  quantify  and 
prioritize  the  hazards  does  not  lessen  the  inherently  subjective  nature  of  risk 
assessment.  However,  the  development  of  quantitative  assessments  does  provide  a 
consistent  framework  for  evaluating  risk.  A  key  factor  in  this  assessment  is  the 
aspect  of  exposure,  which  is  the  number  of  personnel  or  resources  affected  by  a  given 
event  or  over  time  by  repeated  events.  (See  Tables  IV  and  V) 

•  Developing  controls  and  making  risk  decisions  to  mitigate  risk  to  acceptable 
levels  while  increasing  success  rate.  After  assessing  each  threat,  planners  and 
commanders  should  develop  one  or  more  controls  that  either  eliminate  the  threat  or 
reduce  the  risk  to  an  acceptable  level.  As  the  risk  control  decision  is  made,  assets 
must  be  made  available  to  the  selected  control  to  lower  risk. 
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•  Supervising  and  reviewing.  CJTFs  must  continuously  monitor  the  operation  to 
insure  that  controls  are  implemented  correctly,  effectively,  and  remain  in  plaee;  they 
must  insure  aetion  is  taken  to  correct  ineffective  risk  eontrols,  always  being  prepared 
to  reinitiate  the  ORM  process  in  response  to  new  threats.  After  eontrols  have  been 
applied,  a  review  must  be  aecomplished  to  see  if  the  risks  and  the  mission  are  in 
balance.'"^  Applying  the  ORM  process  sequentially  is  important  beeause  eaeh 
component  builds  on  the  previous  steps.  A  typical  mistake  in  applying  the  ORM 
proeess  to  JTF  planning  is  interrupting  the  threat  identification  phase  to  begin 
prematurely  applying  controls  against  a  particular  risk  that  planners  believe  is 
important.  This  disruption  of  the  cyele  may  allow  important  threats  to  be  overlooked, 
and  the  ORM  process  beeomes  unbalanced  to  the  point  where  prioritization  of 
resources  is  misguided.  The  ORM  process  has  its  roots  in  the  military  decision¬ 
making  process,  as  seen  in  Table  1  (Risk  Management  Stepsj.^^ 

More  importantly  than  the  process  of  ORM  is  the  application  of  the  key  principles  that 
apply  the  framework  to  operational  planning  and  execution. 

•  Accept  no  unnecessary  risk.  An  unnecessary  risk  is  any  risk  that,  if  taken,  will  not 
contribute  meaningfully  to  mission  aecomplishment  or  will  needlessly  endanger  lives 
and  resources.'^  No  commander  intentionally  accepts  unnecessary  risks;  however, 
“what  you  don’t  know,  you  don’t  know,”  and  therefore,  without  a  systematic  risk 
analysis  process  during  the  planning  phase  to  determine  a  COA,  the  commander  may 
be  accepting  a  risk  that  he  is  unaware  exists. 

•  Make  risk  decisions  at  the  appropriate  level.  Anyone  ean  make  a  risk  deeision; 
however,  the  most  mission  supportive  deeisions  come  from  the  commander  who  has 
the  resources  and  authority  to  eliminate  or  minimize  the  threat,  reduee  the  risk  to  an 
acceptable  level,  or  simply  aecept  the  risk. 

•  Accept  risk  when  benefit  outweighs  the  cost.  The  proeess  of  weighing  risk  against 
opportunities  and  benefits  helps  to  maximize  mission  suceess.  Balancing  costs  and 
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benefits  is  a  subjective  proeess  and  must  remain  a  leader’s  decision. 
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•  Anticipate  and  manage  risk  by  planning.  Success  in  joint  operations  begins  prior 
to  battle,  during  the  planning  stage  when  terms  and  conditions  for  combat  are  set. 
ORM  functions  within  this  context,  for  it  is  an  intuitive  process  interwoven 

1  8 

throughout  the  warrior  art  of  decision-making  and  not  a  separate  parallel  function. 

Purpose  for  Embedding  ORM  into  Joint  Planning 

And  for  this  reason,  the  wise  general  in  his  deliberations  must  eonsider  both 
favourable  and  unfavourable  factors.  [Ts'ao  Ts'ao]  He  ponders  the  dangers 
inherent  in  the  advantages,  and  the  advantages  inherent  in  the  danger.  By  taking 
into  aceount  the  favourable  factors,  he  makes  his  plan  feasible,  by  taking  into 
account  the  unfavourable  factors,  he  may  resolve  the  difficulties.^^ 

Every  day,  as  we  respond  to  the  nation’s  needs,  we  expose  our  people  to  hazards  in 

uncertain  and  eomplex  environments.  We  do  this  with  the  full  knowledge  that  there  are  inherent 

risks  assoeiated  with  military  operations.  The  nature  of  our  profession  will  not  allow  for  either 
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complaeency  or  a  cavalier  acceptance  of  risk. 

Joint  warfare  is  essential  to  our  nation’s  eapability  to  fight  and  win.  The  nature  of 
modern  warfare  demands  we  plan  and  fight  as  a  team.  The  eombatant  commander's  strategie 
planning  in  peacetime  provides  the  framework  for  employing  forces  in  response  to  crisis.  The 
strategic  estimate  is  a  tool  available  to  eombatant  commanders  and  subordinate  JFCs  as  they 
develop  campaign  plans  and  subordinate  campaign  and  operational  plans.  In  the  strategic 
estimate,  eommanders  focus  on  the  threat  and  eonsider  other  circumstances  affecting  the  military 
situation  as  they  develop  and  analyze  their  COAs.  One  of  those  eireumstanees  considered  is  the 
assessment  of  strategie  alternatives  available  with  accompanying  analysis,  risks  and  the 
requirements  for  plans.  For  joint  forces  to  suceeed  in  battle,  they  must  have  a  single,  unified 
planning  and  exeeution  framework  for  translating  individual  service  terminology  into  a  common 
understood  language  and  standard  operating  procedures.  The  baseline  of  this  joint  framework 
is  the  Joint  Operation  Planning  and  Execution  System  (JOPES).  JOPES  furnishes  joint 
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commanders  and  war  planners  at  all  levels  with  standardized  policies,  proeedures,  and  formats  to 
produce  and  execute  a  variety  of  required  tasks. JOPES'  procedures  provide  multiple  levels  of 
deeision-making  and  risk  analysis  in  two  forms  of  joint  operational  planning.  Deliberate 
planning  evolves  operational  plans  through  COA  development  for  eontingency  operations 
identified  in  joint  strategic  planning  documents.  Crisis  Aetion  Planning  (CAP)  is  a  time- 
sensitive,  JOPES  proeess  to  develop  joint  operational  plans  and  orders  in  response  to  an 
unfolding,  time-sensitive  crisis.  All  joint  operational  plans  must  conform  to  the  criteria  of 
adequacy,  feasibility,  acceptability,  and  eompliance  with  joint  documents.  Adequacy  establishes 
that  the  plan  satisfies  the  tasking  and  will  accomplish  the  mission.  Eeasibility  insures  tasks  can 
be  accomplished  with  available  resources  within  the  time  frame  conceived.  Acceptability  checks 

that  the  plans  are  proportional  and  worth  the  anticipated  cost  without  incurring  excessive  losses 
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of  personnel,  equipment,  material,  time  or  position. 

Correspondingly,  a  good  risk  management  approach  to  planning  includes  the  essential 
elements  of  threat,  vulnerability,  and  a  eritieality  assessment,  used  in  synchronization  with  the 
mission  statement  and  commander's  intent.  The  threat  assessment  identifies  and  evaluates 
threats  based  on  multiple  factors,  including  hostile  capability  and  intentions  as  well  as  the 
potential  lethality  of  enemy  attack.  A  vulnerability  assessment  is  a  process  that  identifies 
weaknesses  that  may  be  exploited  by  the  enemy  and  suggests  options  to  eliminate  or  control 
those  weaknesses.  The  eritieality  assessment  is  a  proeess  designed  to  systematically  identify 
those  assets  in  an  operation  that  are  vital  to  the  mission  or  funetion.  Critieality  assessments  are 
important  because  they  provide  the  basis  for  prioritization  of  those  assets  that  require  a  higher 
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level  of  protection  from  attack. 


There  is  a  remarkable  similarity  between  the  Deliberate  Planning  proeess,  Crisis  Aetion 
Planning  proeess  and  the  Operational  Risk  Management  proeess  (See  Table  VI).  In  Phase  I  of 
CAP  (Situation  Development),  hazards  assoeiated  with  the  fundamental  assumption  of  national 
seeurity  interests  determine  if  military  aetion  is  neeessary.  In  the  parallel  ORM  proeess,  the 
planner  identifies  the  hazards  assoeiated  with  an  operation  or  a  threat  to  his  forees  or,  more 
importantly,  what  will  prevent  him  from  aeeomplishing  his  mission  quickly  and  decisively. 

In  concert  with  ORM,  the  generic  military  analysis  model  of  METT-T  should  be  used  for 
conducting  a  situational  awareness  process  that  aids  the  JTF  planner  in  understanding  both 
friendly  and  hostile  environments.  The  analysis  is  broken  down  into  the  general  areas:  (1)  the 
Mission  itself,  (2)  the  Enemy.  (3)  Terrain/weather.  (4)  Troops  and  support  available,  and  (5) 
Time  available.  The  factors  of  METT-T  provide  a  second  framework  for  identifying  hazards, 
determining  risks  and  implementing  controls  when  planning,  preparing,  and  executing 
operations.  When  applying  the  ORM  process  using  a  framework  of  METT-T  as  a  basis  during 
mission  analysis,  commanders  and  staffs  should  look  for  hazards  that  affect  tactical,  operational, 
and  accident  risks.  They  must  identify  all  hazards  that  may  present  significant  threats  to  the 
mission.  By  continuing  a  comprehensive  integration  of  ORM  and  METT-T  analysis  in  Phase  2 
(Crisis  Assessment)  of  CAP  planning,  a  substantial  number  of  critical  hazards  can  be  identified. 
These  hazards  are  associated  with  operational  factors,  critical  factors,  operational  functions  and 
principles  of  war.  Once  identified,  the  hazards  are  assessed  using  the  ORM  process,  in  terms  of 
severity  and  probability,  where  the  risk  of  any  event  can  be  more  usefully  thought  of  as  the 
product  of:  (1)  the  probability  of  that  event  occurring,  and  (2)  the  costs  associated  with  the  event 
occurring.  The  resultant  numerical  quantity  can  be  considered  a  Risk  Assessment  Index  (RAI) 
that  the  commander  and  planner  can  use  to  prioritize  the  criticality  of  the  risk,  and  it  can  be  the 
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basis  of  a  “totem  pole”  prioritization  for  alloeation  of  resources  to  the  risks  that  will  most  affect 
the  successful  outcome  of  the  operation.  (See  Table  IV.) 

In  Phase  3  (Course  of  Action  Development),  the  COA  is  any  concept  of  operation  open  to 
a  commander  that  if  adopted,  would  result  in  accomplishment  of  the  mission.  It  is  the  product  of 
the  CES  process  and  will  include  the  concept  of  operations,  evaluation  of  supportability,  and 
integrated  time-phased  force  deployment  database  for  operations.  When  approved,  the  COA 
becomes  the  basis  for  development  of  an  Operational  Plan  (OPLAN)  or  Operational  Order 
(OPORD).  The  corresponding  phase  of  ORM  that  applies  is  Hazard  Assessment,  with  the 
continued  use  of  the  product  of  severity  and  probability.  During  COA  development,  we  are 
determining  the  direct  impact  of  each  threat  on  the  operation.  Planners  can  now  begin 
preliminary  incorporation  of  risk  controls  into  the  COA’s  testing  for  feasibility,  acceptability  and 
adequacy. 

In  Phase  4  (COA  Selection),  the  President  and  Secretary  of  Defense  (formerly  called  the 
National  Command  Authority  or  NCA)  decide  on  a  course  of  action.  In  this  phase,  COAs  are 
war-gamed  against  the  Enemy’s  most  likely  and  most  dangerous  Courses  of  Action  (ECO  As) 
comparing  the  benefits  and  costs  of  each  COA  against  opposing  ECOAs.^"^  COAs  are 
continuously  analyzed  to  mitigate  risk  until  the  operational  level  of  risk  is  acceptable  to  the 
combatant  commander.  Determining  the  risk  in  a  COA  is  more  art  than  science.  Historical  data, 
intuitive  analysis  and  judgment  are  employed  to  estimate  the  risk  of  each  threat.^^  The  level  of 
risk  in  certain  sections  of  the  COA  may  still  be  extremely  high,  but  balancing  this  level  with  the 
potential  benefits  to  be  gained  can  make  it  acceptable  to  the  commander. 

In  Phase  5  (Execution  Planning),  the  Joint  Eorce  Combatant  Commander  develops  a 
campaign  plan  or  Operational  Order  (OPORD)  and  Time-Phased  Eorce  and  Deployment  Data 
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(TPFDD).  The  ORM  application  makes  risk  decisions  and  incorporates  risk  controls  into  the 
OPORD  or  OPLAN  in  determining  if  there  is  any  residual  risk  that  needs  resource  allocation  to 
raise  the  comfort  level  of  the  commander  in  what  he  is  willing  to  accept. 

In  the  final  phase  of  the  CAP  (Execution),  the  President  and  Secretary  of  Defense 
authorize  the  Combatant  Commander  to  execute  the  OPORD  or  campaign  plan.  The  staff  then 
implements  execution,  paying  close  attention  to  the  areas  with  the  highest  residual  risk, 
implementing  additional  controls  (if  necessary)  and  supervising  execution  through  the  final  step 
in  the  ORM  process.  (See  Tables  II  and  III).  Within  this  context  of  the  operational  art  of 
execution,  the  principal  role  of  the  commander  and  staff  is  to  soundly  sequence  and  synchronize, 
or  simply  stated,  to  “orchestrate”  the  employment  of  military  forces  and  non-military  sources  of 

'y-j 

power  to  accomplish  the  strategic  and  operational  objectives  in  a  given  theater.  Without 
synchronizing  all  sources  of  power,  both  military  and  non-military,  it  is  difficult,  if  not 
impossible,  to  employ  forces  quickly  and  decisively  in  space,  time,  and  purpose  to  achieve 

38 

victory  with  minimum  losses  in  personnel  and  material. 

Joint  Pub.  3-0,  Doctrine  for  Joint  Operations,  directs  Joint  Force  Commanders  to  concern 
themselves  with  risk  reduction  during  planning,  preparation  and  conduct  of  combat  operations. 
Unfortunately,  the  guidance  on  managing  risk  during  the  execution  of  operations  is  a  “broad 
brush”  approach — discussing  issues  as  joint  force  morale,  risk  of  failure  to  national  prestige,  loss 
of  expensive  equipment,  and  damage  to  the  environment.^^  By  integrating  the  risk  management 
process  into  each  phase  of  the  deliberate  and  crisis  action  processes  of  the  JOPES,  the  Joint  Task 
Force  (JTF)  and  Major  Subordinate  Element  (MSE)  identify  the  level  of  command  authority 
responsible  for  risk  management  execution  during  each  particular  phase  of  planning  process. 
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Thus,  the  ORM  process  should  be  considered  throughout  each  step  of  the  planning  by  each  level 
of  command."^^  (  See  Tables  II  and  III ) 

The  fundamental  purpose  of  the  armed  forces  of  the  United  States  is  to  win  our  nation’s 
wars — quickly  and  decisively.  The  balancing  of  bold  execution  and  decisive  action  in  combat 
versus  the  conservative  measures  required  of  force  protection  are  not  mutually  exclusive.  The 
risk  tolerance  of  the  commander  who  makes  these  decisions  is  key  in  choosing  effective  courses 
of  action  that  are  mission  supportive. 

Current  joint  doctrine  stresses  the  requirement  for  moral  courage  involving,  "competent 
risk-taking  and  tenacity  and  includes  the  willingness  to  stand  up  for  what  one  believes  to  be 
right,  accepting  full  responsibility  for  the  outcome. 

Secretary  of  Defense,  Donald  Rumsfeld  states,  “When  the  U.S.  commits  forces,  the  task 
should  be  achievable,  at  acceptable  risk.”"^^ 
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Conclusions  and  Recommendations 


Operational  risks  are  inereasing  at  an  exponential  rate  as  the  United  States  military  faees 
global  asymmetrie  threats  and  more  sophistieated  adversaries.  While  there  have  been  some 
recent  improvements  in  the  incorporation  of  ORM  into  the  joint  publications,  the  overall 
direction  has  been  one  of  simply  using  selected  ORM  terminology  to  substitute  for  full  doctrinal 
integration  and  implementation.  It  has  become  a  superficial  effort  by  some  commanders  to 
answer  the  essential  operational  question,  “What  is  the  likely  cost  or  risk  in  performing  the 
sequence  of  actions  necessary  to  produce  the  military  condition  that  will  achieve  the  strategic 
goals  in  the  theater?”"^^  The  ORM  process  is  a  tool  with  which  the  CJTF  can  identify  operational 
risk,  assess  its  impact,  implement  prioritized  risk  controls,  permitting  the  commander  boldly  to 
accept  greater  levels  of  risk  to  enhance  operational  success.  The  ORM  process  aids  the 
commander,  enabling  him  to  make  informed  decisions  about  risk  based  on  a  quantifiable, 
analytical  assessment  of  risk  in  relation  to  mission  objective.  No  longer  will  the  commander 
have  to  rely  exclusively  on  his  institutionalized  intuition  and/or  experience  in  calculating  the 
increased  levels  of  risk  he  will  have  to  overcome  to  achieve  mission  success.  Increased  mission 
effectiveness  will  result  from  an  educated  management  of  risk  that  spans  the  spectrum  of  joint 
operational  planning  from  initial  planning  through  mission  execution.  While  mission  success  is 
always  the  foremost  concern,  it  has  been  a  well  established  fact  that  change  is  the  "mother"  of  all 
risk  and  the  reluctance  to  understand  and  react  in  a  timely  manner  to  the  ever-changing 
battlespace  can  be  catastrophic.  And,  ORM  is  the  tool  that  will  add  some  precision  and  sound 
logic  to  that  responsibility. 

Combatant  commanders  and  staff  planners  apply  the  test  of  acceptability  to  joint 
operation  plans  in  a  continuing  cycle.  Acceptable  plans  correctly  manage  operational  risks  and 
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costs,  minimize  the  dilution  of  own  and  friendly  foree  strength,  and  conserve  combat  power. 
ORM  provides  the  solution  to  insuffieient  proeedural  guidanee  in  determining  aeceptability  in 
joint  doetrinal  publications.  Deliberate  and  in-depth  risk  assessment  in  risk  management  lead  to 
intelligent,  well-balaneed,  analytieal  ehoiees  when  developing  CO  As.  During  the  joint  planning 
proeess,  bold  commanders  should  use  a  time  critieal  ORM  process  to  make  shrewd  risk  decisions 
while  executing  plans  in  combat  and  in  non-combat  operations. 

As  a  consequence,  current  joint  doetrine  needs  to  be  modified  to  codify  the  use  of  the 
ORM  tool  in  the  joint  operational  planning  proeess.  Speeifieally,  reeommended  changes  to  the 
current  JP  3-0,  Doetrine  for  Joint  Operations  are  listed  (in  bold)  with  ehapter  and  page  number  in 
Attaehment  1. 

The  User’s  Guide  for  JOPES  (May  1995),  should  be  updated  to  address  how  the 
principles  and  proeesses  of  ORM  apply  to  both  deliberate  planning  and  erisis  action  planning. 
The  Joint  Doctrine  Encyclopedia  (16  July  1997)  needs  to  also  be  updated  to  inelude  standardized 
ORM  terminology  and  a  definition  of  the  proeess.  An  additional  reeommendation  is  that  staff 
planners  be  direeted  to  use  the  ORM  Probability  and  Severity  Quantifieation  Matrix  (see  Table 
IV)  to  eapture  and  prioritize  all  risks  that  are  uneovered  during  the  planning  proeess.  Balancing 
such  risks  against  the  METT-T  analysis  model  will  assist  in  applying  resourees  to  mitigate  the 
most  hazardous  risks  in  the  COA. 

In  elosing.  Operational  Risk  Management  assists  the  commander  in: 

•  Conserving  lives  and  resourees  while  avoiding  unneeessary  risk 

•  Making  an  informed  deeision  to  implement  a  COA 

•  Identifying  feasible  and  effeetive  control  measures  where  speeific  standards  do  not 
exist 

•  Providing  reasonable  alternatives  for  mission  aeeomplishment 
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However,  ORM  does  not: 


•  Inhibit  the  eommander’s  flexibility  and  initiative 

•  Remove  risk  altogether,  or  support  a  zero  defects  mindset 

•  Require  a  go/no  go  decision 

•  Sanction  or  justify  violating  the  law 

•  Remove  the  necessity  for  standard  drills,  tactics,  techniques,  and  procedures 

Until  the  principles  of  risk-based  decision-making  are  thoroughly  integrated  into  joint 
force  planning  and  execution.  United  States'  and  coalition  forces  are  at  risk  for  mission 
degradation  and  human  factors  failures  leading  to  mishaps  and  fratricide. 
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Recommendation  Attachment  1 


Chapter-Page 

III-3 

III-3 

Figure  III-l  on 
page  3-1 

III-4 

III-9 

III-27 

III-28 

III-36 

III-36 


Paragraph 

•  Strategie  Estimate  -  “JFCs  as  they  develop  campaign  plans  and 
subordinate  campaign  operation  plans.”  The  Strategic  Estimate 
should  particularly  focus  on  threats  and  hazards  based  on  the 
CINC’s  risk  guidance.  Historically,  a  majority  of  U.S,  casualties 
come  from  non-hattle  related  mishaps. 

•  “In  the  Strategic  Estimate,  commanders  focus  on  the  threat  and 
consider  other  circumstances  affecting  the  military  situation  as  they 
develop  and  analyze  courses  of  action.”  Circumstances  affecting 
potential  hazards  and  threats  to  he  considered  in  risk  management 
controlled  decisions  must  he  identified  early.  Potential  strategic 
hazards  and  threats  in  deploying  a  force  to  the  theater  must  he 
considered. 

•  Strategic  Estimate  -  “Assessment  of  the  threats  to  accomplishment 
of  assigned  objectives,”  utilizing  the  operational  risk  management 
process. 

•  “Identification  of  potential  military  requirements  across  the  range  of 
military  operations,”  to  include  hazards,  threats,  risks  and  controls. 

•  Subordinate  Campaign  Plans  -  “contribute  to  achieving  combatant 
command  objectives,”  and  risk  guidance.  Risk  guidance  is  the 
combatant  commander’s  intent  and  direction  for  hazards,  threats, 
risks  and  controls.  He  may  establish  decision  authority  and 
priority  of  resources  to  implement  controls.  He  should  identify 
acceptable  risks  based  upon  the  urgency  of  the  situation. 

•  “In  the  concept  of  operations,  the  JFCs  describe  the  overall 
objectives  and  risk  guidance  of  Joint  Forces,  the  mission  assigned. . .” 

•  “In  terms  of  percentage  of  total  available  resources,”  resources 
necessary  to  implement  hazard  controls  should  be  considered. 

•  “. .  .or  they  may  decide  the  risk  is  acceptable.”  If  unable  to  reduce 
or  eliminate  risks,  commanders  should  elevate  their  concerns  to  the 
appropriate  decision  level  to  effect  controls  or  modify  plans. 

•  Operating  to  establish  standards  is  the  most  effective  method  in 
reducing  loss  due  to  accidents.  Forces  must  be  trained  and 
accountable  to  operate  to  established  standards. 
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Chapter-Page  Paragraph 

IV-3  •  “Climatologieal  and  hydrographie  studies  and  long  range  foreeasts 

help  the  JFCs  understand  the  most  advantageous  time  and  loeation  for 
operations.”  The  physical  environment  may  also  increase  hazards 
and  significantly  increase  risks  to  friendly  forces  and  mission 
success, 

IV-5  •  “Protection  of  Forces  -  Potential  or  Likely  Threats”  and  Hazards. 

IV-5  •  Last  paragraph.  Interoperahility  is  critical  to  reducing  risks 

associated  with  Joint  Operations,  Inconsistencies  in  procedures 
and  communications  equipment  incompatihle  with  other  services 
will  greatly  increase  risk  of  mission  degradation. 

IV-7  •  “Prevention  of  Fratricide  -  Institute  Appropriate  Preventive 

Measures.”  Within  the  joint  arena,  standardized  communications 
procedures,  equipment  operahility,  and  weapons  systems 
employment  must  he  addressed, 

IV- 12  •  Protection  -  “Protection  measures  that  apply  to  Joint  Operations  are 

appropriate  also  for  multi-national  situations.”  The  risk  management 
process  is  equally  important  from  planning  to  execution  through 
termination  and  recovery, 

B-1  •  Mission  Analysis  -  “Frame  as  a  clear,  concise  statement  of  the 

essential  tasks  to  be  accomplished  and  the  purpose  to  be  achieved.” 

Include  risk  guidance  as  established  by  the  combatant  commander. 

B-2  •  Deductions  -  “. .  .including  enemy  capabilities  that  can  effect 

mission  accomplishment.”  Threats  and  hazard  identification  begins 
during  mission  analysis  and  continues  through  Course  of  Action 
analysis  and  development.  Assessment  of  hazards  begins  with 
mission  receipt  and  continues  through  Course  of  Action 
comparison.  Controls  for  hazards  are  developed  as  the  Course  of 
Actions  are  developed  and  compared.  Supervision  and  evaluation 
of  controls  for  hazards  and  risk  levels  continues  through  mission 
execution. 
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As  controls  for  threats  are  identified  and  selected,  the 
Assess  Threats  Process  is  repeated . 


Figure  1.  Continuous  Application  of  Risk  Management 


Source:  Department  of  the  Navy,  Navy  Warfare  Development  Command,  Multi-Service  Tacties, 
Techniques  and  Procedures  for  Risk  Management  NTTP  5-03.5,  (Newport,  R.I.;  February  15, 
2001),  1-4. 
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Table  I. 

Risk  Management  Steps 


Military  Decision- 
Making  Process 

Risk  Management  Steps 

step  1 

Identify 

Hazards 

step  2 
Assess 
Hazards 

step  3 

Develop 

Controls 

and 

Make  Risk 
Decision 

step  4 

Implement 

Controls 

step  5 

Supervise  and 
Evaluate 

Mission  Receipt 

D 

Mission  Analysis 

X 

X 

COA  Deveiopment 

D 

X 

X 

COA  Analysis 

D 

X 

X 

COA  Comparison 

X 

COA  Approval 

X 

Orders  Production 

X 

Rehearsal^ 

B 

X 

X 

X 

X 

Execution  and^ 
Assessment 

X 

X 

X 

X 

X 

Vll  boxes  are  marked  to  emphasize  the  continued  use  of  the  risk  management 
process  throughout  the  mission 


Source:  Department  of  the  Army,  Risk  Management  (FM-100).  (Washington,  D.C.:  April  1998), 
II- 1. 
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Table  11. 

Risk  Management  Execution 
(Risk  Management  in  Deliberate  Planning) 

Deliberate  Planning 

Identify 

Threats 

Assess 

Threats 

Develop  Controls 
Make 

Risk  Decision 

Implement 

Controls 

Supervise 
and  Review 

PHASE  1 

Initiation 

JTF 

PHASE  II 

Concept  Development 

JTF 

JTF 

PHASE  III 

Plan  Development 

MSE 

MSE 

JTF 

MSE 

PHASE  IV 

Plan  Review 

JTF 

PHASE  V 

Supporting  Plans 

MSE 

MSE 

MSE 

JTF 

MSE 

EXECUTION 

JTF 

MSE 

JTF 

MSE 

JTF 

MSE 

JTF 

MSE 

JTF 

MSE 

Table  III. 

Risk  Management  Execution 

Risk  Management  in  Crisis  Action  Planning) 

CRISIS  ACTION 
PLANNING 

Identify 

Threats 

Assess 

Threats 

Develop 
Controls  Make 
Risk  Decision 

Implement 

Controls 

Supervise 
and  Review 

PHASE  1 

Situation  Development 

JTF 

JTF 

PHASE  II 

Crisis  Assessment 

JTF 

JTF 

JTF 

PHASE  III 

COA  Development 

JTF 

MSE 

JTF 

MSE 

JTF 

MSE 

PHASE  IV 

COA  Selection 

JTF 

MSE 

JTF 

PHASE  V 

Execution  Planning 

JTF 

MSE 

JTF 

MSE 

PHASE  VI 

Execution 

MSE 

MSE 

MSE 

JTF 

MSE 

JTF 

MSE 

Source:  Department  of  the  Navy,  Navy  Warfare  Development  Command,  Multi-Service  Tactics,  Techniques 
and  Procedures  for  Risk  Management  NTTP  5-03.5,  (Newport,  R.I.;  February  15,  2001),  II-7,  II-8. 
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Table  IV. 

"Enhanced"  Risk  Assessment  Matrix 

Assignment  of  Numbers  to  Rank  Risks  More  Quantitatively 


Probability 

Frequent 

Likely 

Occasional 

Seldom 

Unlikely 

A 

B 

c 

D 

E 

s 

E 

V 

E 

R 

I 

T 

Y 

Catastrophic 

I 

1 

2 

6 

8 

12 

Critical 

II 

3 

4 

7 

11 

15 

Moderate 

III 

5 

9 

10 

14 

16 

Negligible 

IV 

13 

17 

18 

19 

20 

Risk  Levels 

Table  V. 

Risk  Assessment  Matrix 


Probability 

Severity 

Frequent 

A 

Likely 

B 

Occasional 

C 

Seldom 

D 

Unlikely 

E 

Catastrophic 

I 

E 

E 

H 

H 

M 

Critical 

II 

E 

H 

H 

M 

L 

Marginal 

III 

H 

M 

M 

L 

L 

Negligible 

IV 

M 

L 

L 

L 

L 

E  -  Extremely  High  Risk 

H  -  High  Risk 

M  -  Moderate  Risk 

L  -  Low  Risk 
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